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Clean Version of the Specification 



This application claims the benefit, under 35 U.S.C. § 365 of International 
Application PCT/EP03/50319, filed July 18, 2003, which was published in 
accordance with PCT Article 21(2) on February 5, 2004 in English and which 
claims the benefit of French patent application No. 0209361 , filed July 24, 
2002. 

Technical field of the invention 

[0001] The invention relates to a method of distributing encrypted portions of an 
audiovisual program to user terminals, in particular television receiver 
decoders, in which method the successive portions of the program are 
encrypted with the aid of different keys before being distributed to the user 
terminals. 

Background of the invention 

[0002] In the present patent application, the expression "audiovisual program" 
designates any program, possibly audio, video or both audio and video. Such a 
program may in particular consist of a multimedia program of MPEG 4 type 
which may contain for example several video and/or audio sequences, three- 
dimensional data, two-dimensional graphs and/or associated animation scripts. 

[0003] A method of distributing encrypted portions is known from patent 
document EP-1075108. In this method, one or more seed values are 
communicated selectively to the user terminals so that they can locally 
regenerate a limited set of decryption keys making it possible to decrypt a 
corresponding limited number of encrypted portions of the program. The 
communication of the seed values forms the subject of a billing to the user, the 
amount of which may vary as a function of the extent of the decryption. The 
billing may for example be on a per session or per subscription basis. A per 
subscription billing system proves to be complicated to set in place at the level 
of an audiovisual center which provides the encrypted program. Moreover, per 
session billing gives rise to an overall increase in the cost to the user of using 
the audiovisual service in the case where he profits from only a fraction of the 
program. 

[0004] Furthermore, patent U.S. Pat. No. 4,916,737 discloses a technique in 
which scrambled video and/or audio portions are broadcast and are 
descrambled by means of a receiver decoder box. Moreover, a telephone 
modem linked with this box is periodically connected to a central computer of 
an operator, so as to receive a temporary identification code valid for the next 
period. This code is transmitted by the central computer only after recognition 
of a serial number specific to the relevant box. The periodicity of transmission 
of the new code is for example monthly and the connection lasts for only a few 
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seconds, so that the telephone line need only be tied up for a very short 
duration and frequency. 

[0005] This technique is suitable for an overall subscription for a given period 
and requires complicated management of the subscriptions. It does not allow 
billing adapted in a simple manner to the program actually viewed by a user. 

[0006] U.S. Pat. No. 4,890,322 describes a service for distributing 
announcement messages which is used to control TV signals, program by 
program. The enciphered signals sent are deciphered at the level of each 
subscriber by a deciphering unit, by virtue of the use of a nondedicated 
telephone service line. With each order from a subscriber, the deciphering unit 
automatically transmits the subscriber's request to the distribution service via 
the telephone service line, and receives in return, via this same line, coded key 
information necessary for deciphering the desired program. The key 
information obtained is used for the duration of the program ordered. By way of 
example, the description mentions a deciphering key transmitted to the 
subscriber in the form of a message repeated for three seconds, this key being 
in the form of a number consisting of coded numerical values which may be 
used to fix the coefficients of a signal filter. 

[0007] This method makes billing per program possible without, however, 
allowing finer billing (for example to view a given part of a broadcast), while 
requiring complicated management of billing. 

[0008] To improve the fineness of control on the part of users, provision may be 
made for the independent transmission of parts of program, each being able to 
form the subject of a specific request. Thus, depending on the availability 
thereof, a user may decide to view a first part of a film on a first evening, then a 
second part on another evening. However, such a solution yet further 
complicates the management of transmission and billing, all the more so the 
more elaborate the offerings-for example if they allow a viewer to choose the 
duration of each of the parts. 

Summary of the invention 

[0009] The invention proposes a method of distributing encrypted portions of an 
audio and/or video program which permits simpler and finer billing of the 
service while being able to offer security against piracy. 

[0010] The method according to the invention is characterized in that it 
consists, on initiation, from a user terminal, of a telephone communication with 
a call center, in transmitting in sequence from this call center and during the 
telephone communication the keys to the user terminal, doing so in a manner 
synchronized with the distribution of the successive encrypted portions of the 
program. Of course, the distribution of the successive encrypted portions of the 
program may be carried out by broadcasting over cable, by satellite or over the 
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airwaves. The call center is preferably a center for receiving telephone calls of 
a telephone operator in which means exist for measuring, with each call of a 
user terminal, the time of the telephone communication therewith so that, on 
the basis of this information, an appropriate bill can be generated easily in 
respect of the corresponding user. 

[001 1] It is understood that, so long as the telephone communication is set up 
between the call center and a user terminal, a decryption of the current 
portions of the program is made possible locally in the user terminal. However, 
on completion of the telephone communication, the current encrypted portions 
of the program are no longer decrypted since the keys no longer arrive at the 
user terminal. The duration of plaintext reception of the program therefore 
corresponds overall to the duration of the telephone communication so that the 
user pays only in respect of the actual duration for which he profits from the 
audiovisual service. 

[0012] the method of the invention contrasts surprisingly with the state of the 
art, in which one strives to reduce as far as possible the duration of telephone 
communication required to obtain the decryption data. Specifically, the method 
of the invention relies on the contrary on the continuity of the telephone 
communication throughout the distribution of the encrypted program. These 
characteristics permit not only a broadcasting of audiovisual program for a 
duration decided exactly by the user in real time, but also a payment for this 
service directly by telephone billing. 

[0013] the method according to the invention also advantageously exhibits the 
following features: 

[0014] the telephone communication utilizes an Internet protocol; 

[0015] synchronization time codes are transmitted in correspondence with the 
successive keys during the telephone communication. 

[0016] The invention extends to a decoder for receiver of audio and/or video 
program, in which successive portions of a program are decrypted with lo the 
aid of a succession of different keys, characterized in that it is designed to be 
connected up, by way of a telephone communication interface, to a call center 
and to recover the successive keys in sequence during the communication with 
the call center and to do so in a manner synchronized with the decryption of the 
successive portions of the program. 

[0017] According to preferred features of this decoder: 

[0018] the telephone communication interface is a telephone modem in 
particular of the ADSL modem type which utilizes an Internet protocol. 

[0019] The invention extends also to a decryption routine adapted for loading 
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into the memory of a decoder for receiver of audio and/or video program having 
a telephone communication interface. 

Brief description of the drawings 

[0020] The method, the decoder and the routine according to the invention are 
described hereinbelow in greater detail and illustrated through the single 
FIGURE which diagrammatically represents a system for distributing pay video 
and/or audio program. 

Detailed description of the preferred embodiments 

[0021] Represented in the FIGURE by way of nonlimiting example are just two 
user terminals T1 , T2 each comprising a receiver R1 , R2 of audio and/or video 
program, a decoder D1 , D2 as well as a communication interface M1 , M2 of the 
telephone modem type. 

[0022] The receivers R1 , R2 are here television receivers. The communication 
interfaces M1, M2 could form an integral part respectively of the decoders D1, 
D2 which may be decoders of the "set top box" type. 

[0023] Each decoder D1 , D2 is able to receive on an input channel C1 , C2 
successive encrypted portions of an audio and/or video program. These 
program portions are digital frames. 

[0024] The encrypted portions of the program are distributed here to the user 
terminals T1 , T2 by the RF channel 1 from a broadcasting antenna 2 which is 
linked to an audiovisual center 3 which provides the program. In the audiovisual 
center 3, the successive portions of the program are encrypted using a 
succession of different encryption keys so as to limit the possibilities of piracy. 
The encryption key used to encrypt the successive portions of the program is 
changed at the end of each sequence of n successive portions, the value of n 
being adjusted so as to have a different encryption key for example every 30 
seconds of showing of the program on the screen. 

[0025] The use of time codes in digital audiovisual streams is known: DTS 
(Decoding Time Stamp), PTS (Presentation Time Stamp) and PCR (program 
Clock Reference) in MPEG2-TS streams. These time codes are inserted into 
each encrypted portion of the program and make it possible to synchronize the 
decoder D1 , D2 with the clock of the transmitter 3 of the audiovisual program. 

[0026] According to one aspect of the invention, time codes of the DTS type are 
associated during encryption in the audiovisual center 3 with the various 
encryption keys. This association will serve during the decryption of the 
portions of the program in a decoder to prevent the decryption of a portion of 
the program if the time code associated with the decryption key provided for 
this portion of the program is not synchronized with the time code DTS 
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recovered in this portion of the program. 

[0027] The reference 4 in the FIGURE indicates a telephone call center which 
receives in sequence from the audiovisual center 3 the succession of 
encryption keys, doing so in a manner synchronized with the broadcasting of 
the successive portions of the program by the antenna 2 and hence with the 
receiving in sequence of these portions of the program by the user terminals 
T1,T2. 

[0028] In order for the program to be shown as plaintext at the level of the 
receiver R1 , R2 of a user terminal T1 , T2, the user operates his decoder D1 , 
D2, decoder to initiate a telephone communication with the call center 4 by way 
of a communication interface M1 , M2 of the modem type. The call number of 
the call center may be prerecorded in the decoder so as to make the opening of 
the telephone communication automatic. During the telephone communication, 
the decoder D1 , D2 will be able to be identified by the call center 4 and, 
following identification, the call center 4 transmits in sequence via the 
telephone path to the user terminal T1 , T2 the current successive keys serving 
for the decryption of the current portions of the program received in parallel by 
the decoder D1 , D2. The transmission in sequence by the call center 4 of these 
keys each associated with a time code is done in a manner synchronized with 
the broadcasting of the portions of the program by the antenna 2. In the 
FIGURE, "x, y, z," represents the successive decryption keys and "t1 , t2, t3, . . . 
" represents the time codes associated with the decryption keys. 

[0029] In each decoder D1, D2, the decryption procedure is organized in such a 
way that the successive keys together with the associated time codes 
recovered by way of the communication interface M1 , M2 are checked by 
comparison with the DTS time codes located in the encrypted portions of the 
program received by the decoder. Stated otherwise, a key associated with a 
time code t1 will be rejected if the program portion received in parallel with the 
recovery of this key contains a DTS time code prior to t1 . This program portion 
will therefore not be decrypted in the decoder. 

[0030] In practice, the successive keys together with the respective time codes 
are recovered in the user terminal with a slight lead with respect to the 
corresponding portions of program and a temporary storage of the keys must 
therefore be organized in the decoder so as to allow the decryption during the 
reception of the current portion of program. When a key together with a time 
code t1 is recovered by the decoder, it is stored in the temporary memory of the 
decoder if the DTS time code of the current portion of the program is prior to 
the time code t1 associated with the key. In the converse case, the key is 
rejected and is therefore not recorded in the temporary memory of the decoder. 
During the decryption of a current portion of the program, the key necessary for 
this 
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routine loaded into memory in a conventional programmable decoder equipped 
with a telephone communication interface. 

[0032] The communication interface will preferably be a modem of the ADSL 
type which will advantageously utilize an Internet communication protocol to 
allow multiple communications on the same telephone line. 
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